Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Tutorial | Shelling via SQL Injection

Do you need wget installed on windows machines?
The only problem with INTO OUTFILE is that it requires root privs, which is fairly rare. Great tutorial; better than most I've seen on it.
(Apr 1, 2013 12:17 PM)LevelUp Wrote:  I did mention at the top that we have to check for root privileges.

Not saying you didn't; just reiterating that this method would be much more effective if that wasn't the case.
thanks for sharing this nice tutorial
Quote: Grab the directory via @@datadir

Quote:UNION SELECT null,null,null,'my name is tim',null INTO OUTFILE '/path/returned/by/datadir/tim.txt'--

What's the point of finding the path of Mysql data directory.It's totally useless
Bookmarked for later use! <3 :D Is there any way to save this thread on my account here?
Thanks, works pretty nice. I can't rep you, but I would. Thanks!


Possibly Related Threads...
Thread / Author Replies Views Last Post
by OrochimaruMar 5, 2024 11:47 AM 56 6,380 Mar 5, 2024 11:47 AM
Last Post: Any1One
by sloberApr 21, 2020 03:26 PM 0 131 Apr 21, 2020 03:26 PM
Last Post: slober
by trox2169__Nov 30, 2019 02:26 AM 1 232 Nov 30, 2019 02:26 AM
Last Post: stdio